If this is your first visit, be sure to
check out the FAQ by clicking the
link above. You may have to register
before you can post: click the register link above to proceed. To start viewing messages,
select the forum that you want to visit from the selection below.

Re: trt57.exe - how is this getting in?

Hi!
This is usually happening when you browse to sites with fake warnings that you are infected by malware. There is no consecuencies if you are not falling in the trap and actually download the fake antivirus to your system, like it seems in this case.

Golden rules: Never trust any page or window that says you are infected. Only trust ZA and close the other windows. Always keep your ZA up-to-date and set your ZA to update the AV every 30 minutes. Check also that your are not running vulnerable software, click here.

If you have ZA extreme please turn ON the virtualization (ZA browser security), this will ensure your browser is isolated from the system and cannot be passively infected.

Re: trt57.exe - how is this getting in?

I'm pretty sure that I did not download anything, but yet I must have. Some of these sites are very difficult to get off of with Javascript enabled. I've seen sites insist on Flash also and I had kill the FireFox process.

Re: trt57.exe - how is this getting in?

Originally Posted by denverdave

I'm pretty sure that I did not download anything, but yet I must have. Some of these sites are very difficult to get off of with Javascript enabled. I've seen sites insist on Flash also and I had kill the FireFox process.

Doesn't zonealarm scan downloads?

Thanks.

You should consider installing NoScript 1.9.9.15 if using Firefox.

It allows JavaScript, Java and other executable content to run only from trusted domains of your choice, e.g. your home-banking web site, guarding your "trust boundaries" against cross-site scripting attacks (XSS) and Clickjacking attempts, thanks to its unique ClearClick technology.

trt57 exe how is this getting in

I have been trying to get my Winodws XP Home Edition PC clean of Spyware/Malware. It was really infected and I removed most with out a problem using Spyware Doctor.But no matter what I do I cant seem to stop 2 executables from running, ripirr.exe & drkr.exe.Ive deleted the files from the windowsprefetch directory. deleted reference in the registry, ram msconfig to disbale them from the startup items.Ive done this in safe and well as normal mode, and they just keep coming back.Anyone know how to kill this thing?

Re: trt57 exe how is this getting in

Originally Posted by Adexenronse

... they just keep coming back.Anyone know how to kill this thing?

Old system restore points should be cleaned out to prevent possible reinfection. Likely these files were backed up and saved in prior system restore points. Since these are protected files, tools cannot access to delete, there can sometimes be reinfection from these system restore points. Good practice after any computer cleanup is to clear old restore points and set a new restore point and prevent any reinfection.